CVE-2017-9671

CVE-2017-9671 describes a heap overflow vulnerability in Alpine Linux's package manager, apk, affecting alpinelinux and alpine_linux. A remote attacker can exploit this by crafting a malicious APKINDEX.tar.gz file containing a malformed pax header block. This vulnerability carries a high severity CVSS score of 7.8, indicating a low attack complexity and the potential for a complete compromise of confidentiality, integrity, and availability (denial of service or code execution) if a user interacts with the malicious file. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.